@aiwg/cli 2026.9.19 → 2026.9.21

package/agentic/code/providers/capability-matrix.yaml

@@ -405,11 +405,18 @@ providers:
     display_name: Grok Build
     status: experimental
     # xAI Grok Build CLI/TUI. Distinct from Grok Bot (`grokbot`).
-    # Wave 1 (#2575): native kernel skills + AGENTS.md. Agents/rules writers deferred #2577.
+    # #2577: fixture-backed native subagents and background tasks; see
+    # test/unit/providers/grok-build-provider.test.ts and
+    # test/unit/providers/grok-build-dispatch.test.ts. MCP is independently
+    # covered by test/unit/providers/grok-build-native-integration.test.ts.
+    # Headless and ACP protocol contracts are tested in grok-build-headless.test.ts
+    # and grok-build-acp.test.ts. ACP does not establish a daemon lifecycle.
+    # No fixture supports native cron, multi-agent teams, mission control,
+    # or AIWG behavior registration; those claims remain false.
     daemon_tier: unsupported
     daemon_pty_adapter: false
     artifact_paths:
-      agents: "Indexed: aiwg discover / aiwg show agent (native .grok/agents writer deferred #2577)"
+      agents: .grok/agents/  # qualified AIWG model workers only
       commands: null
       skills: .grok/skills/
       skills_cross_agent: .grok/.aiwg/skills/  # --copy-all opt-in mirror
@@ -417,16 +424,16 @@ providers:
       behaviors: null
     native_features:
       cron: false
-      agent_teams: false
-      tasks: false
+      agent_teams: false # independent subagents do not imply native team orchestration
+      tasks: true        # native background subagents/tasks
       mcp: true
       behaviors: false
       mission_control: false
       daemon: false
     emulation:
       cron: null
-      agent_teams: null
-      tasks: aiwg-mc
+      agent_teams: aiwg-mc
+      tasks: native
       mcp: null
       behaviors: aiwg-mc
       mission_control: aiwg-mc
@@ -479,6 +486,51 @@ providers:
     deploy_target: mixed
     aggregated_output: true
 
+  muse:
+    display_name: Muse Code
+    status: experimental
+    # Meta's terminal/CI coding agent (Muse Spark-powered). Explicitly not a
+    # model-API surface: Glimmer/Image/Voice are out of scope.
+    # Skill writer (.agents/skills + XDG user root), discover-first AGENTS.md
+    # bridge, managed .muse/hooks.json, and opt-in MCP settings profile.
+    # ADR: docs/architecture/adr-muse-provider-target.md · epic #223.
+    daemon_tier: unsupported
+    daemon_pty_adapter: false
+    artifact_paths:
+      agents: "Indexed: aiwg discover / aiwg show agent (native writer deferred)"
+      commands: null
+      # Project root is fixed; the user root resolves at deploy time from
+      # XDG_CONFIG_HOME (default ~/.config/muse/skills when unset). Never
+      # advertise ~/.muse as a skill root, and never silently mirror into
+      # ~/.agents/skills (#226).
+      skills: .agents/skills/
+      skills_cross_agent: null
+      rules: "Indexed: aiwg show rule + AGENTS.md discover-first bridge"
+      behaviors: null
+    native_features:
+      cron: false
+      agent_teams: false
+      tasks: false
+      mcp: true
+      behaviors: false
+      mission_control: false
+      daemon: false
+    emulation:
+      cron: null
+      agent_teams: null
+      tasks: aiwg-mc
+      mcp: null
+      behaviors: aiwg-mc
+      mission_control: aiwg-mc
+      daemon: null
+    hook_wiring:
+      at_link_support: false
+      hook_file: .muse/hooks.json
+      fallback: full-inject
+      context_file: AGENTS.md
+    deploy_target: mixed
+    aggregated_output: false
+
   openclaw:
     display_name: OpenClaw
     status: stable

package/agentic/code/providers/model-capabilities.v1.json

@@ -228,6 +228,19 @@
       "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-grokbot-provider-target.md",
       "verifiedAt": "2026-09-15"
     },
+    "grok-build": {
+      "agent": "inherited",
+      "skill": "inherited",
+      "globalChild": "native",
+      "identifierSyntax": "Provider-local alias from grok inspect and $GROK_HOME config; distinct from API model id",
+      "inheritance": "Agent and skill roles resolve through the session model unless a validated Grok Build alias is selected",
+      "invalidPinFallback": "Report the unavailable alias; use the sole discovered model only when exactly one is available",
+      "configTarget": "$GROK_HOME/config.toml [models] and [model.<alias>] (read-only discovery)",
+      "artifactFormat": "Grok Build model alias",
+      "verification": "grok inspect --json plus bounded parsing of model fields from reported config layers",
+      "sourceUrl": "https://docs.x.ai/build/settings",
+      "verifiedAt": "2026-09-21"
+    },
     "hermes": {
       "agent": "global-only",
       "skill": "unsupported",
@@ -253,6 +266,27 @@
       "verification": "Parse against OpenHuman definition schema",
       "sourceUrl": "https://github.com/tinyhumansai/openhuman/blob/main/src/openhuman/agent/harness/definition.rs",
       "verifiedAt": "2026-07-20"
+    },
+    "muse": {
+      "agent": "unsupported",
+      "skill": "unsupported",
+      "globalChild": "informational",
+      "identifierSyntax": "Meta provider catalog model_id (Muse Code 1.4.0: muse-spark-1.3 current, muse-spark-1.3-contributor default, muse-spark-1.2, muse-spark-1.2-contributor), passed as muse exec --model",
+      "inheritance": "The session model comes from --model, else settings.json `model`, else the provider catalog default; per-agent and per-skill pins are not verified",
+      "invalidPinFallback": "muse exits 1 with run.terminal.failed (\"model `<id>` does not exist or you lack access\"); never falls back to another model",
+      "configTarget": "$XDG_CONFIG_HOME/muse/settings.json `model` (read-only; AIWG never writes it)",
+      "artifactFormat": "Meta provider model id (session-level only)",
+      "verification": "muse exec --json --model <id> emits run.model.configured with model_id; observed muse-spark-1.3 and muse-spark-1.3-contributor in native session logs on Muse Code 1.4.0",
+      "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-muse-provider-target.md",
+      "verifiedAt": "2026-09-25",
+      "effortValues": [
+        "minimal",
+        "low",
+        "medium",
+        "high",
+        "xhigh",
+        "max"
+      ]
     }
   }
 }

package/agentic/code/providers/model-catalog.v1.json

@@ -1,7 +1,7 @@
 {
   "$schema": "../../../schemas/models/model-catalog.v1.schema.json",
   "version": "1.0.0",
-  "refreshedAt": "2026-07-20",
+  "refreshedAt": "2026-09-21",
   "staleAfterDays": 90,
   "providers": {
     "antigravity": {
@@ -28,12 +28,12 @@
     "claude": {
       "roles": {
         "reasoning": {
-          "id": "claude-opus-4-7",
+          "id": "claude-opus-5",
           "status": "active",
           "observed": false
         },
         "coding": {
-          "id": "claude-sonnet-4-6",
+          "id": "claude-sonnet-5",
           "status": "active",
           "observed": false
         },
@@ -43,29 +43,29 @@
           "observed": false
         }
       },
-      "sourceUrl": "https://docs.anthropic.com/en/docs/about-claude/models/overview",
-      "verifiedAt": "2026-07-20"
+      "sourceUrl": "https://platform.claude.com/docs/en/about-claude/models/overview",
+      "verifiedAt": "2026-09-21"
     },
     "codex": {
       "roles": {
         "reasoning": {
-          "id": "gpt-5.4",
+          "id": "gpt-5.6-sol",
           "status": "active",
           "observed": true
         },
         "coding": {
-          "id": "gpt-5.5",
+          "id": "gpt-5.6-terra",
           "status": "active",
           "observed": true
         },
         "efficiency": {
-          "id": "gpt-5.4-mini",
+          "id": "gpt-5.6-luna",
           "status": "active",
           "observed": true
         }
       },
-      "sourceUrl": "https://learn.chatgpt.com/docs/agent-configuration/subagents",
-      "verifiedAt": "2026-07-20"
+      "sourceUrl": "https://learn.chatgpt.com/docs/models",
+      "verifiedAt": "2026-09-21"
     },
     "copilot": {
       "roles": {
@@ -133,12 +133,12 @@
     "opencode": {
       "roles": {
         "reasoning": {
-          "id": "anthropic/claude-opus-4-7",
+          "id": "anthropic/claude-opus-5",
           "status": "unverified",
           "observed": false
         },
         "coding": {
-          "id": "anthropic/claude-sonnet-4-6",
+          "id": "anthropic/claude-sonnet-5",
           "status": "unverified",
           "observed": false
         },
@@ -149,7 +149,7 @@
         }
       },
       "sourceUrl": "https://opencode.ai/docs/models",
-      "verifiedAt": "2026-07-20"
+      "verifiedAt": "2026-09-21"
     },
     "omp": {
       "roles": {
@@ -298,6 +298,27 @@
       "sourceUrl": "https://github.com/jmagly/aiwg/blob/main/docs/architecture/adr-grokbot-provider-target.md",
       "verifiedAt": "2026-09-15"
     },
+    "grok-build": {
+      "roles": {
+        "reasoning": {
+          "id": "configured/reasoning",
+          "status": "unverified",
+          "observed": false
+        },
+        "coding": {
+          "id": "configured/coding",
+          "status": "unverified",
+          "observed": false
+        },
+        "efficiency": {
+          "id": "configured/efficiency",
+          "status": "unverified",
+          "observed": false
+        }
+      },
+      "sourceUrl": "https://docs.x.ai/build/settings",
+      "verifiedAt": "2026-09-21"
+    },
     "hermes": {
       "roles": {
         "reasoning": {
@@ -339,6 +360,27 @@
       },
       "sourceUrl": "https://github.com/tinyhumansai/openhuman/blob/main/src/openhuman/agent/harness/definition.rs",
       "verifiedAt": "2026-07-20"
+    },
+    "muse": {
+      "roles": {
+        "reasoning": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        },
+        "coding": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        },
+        "efficiency": {
+          "id": "muse-spark-1.3",
+          "status": "active",
+          "observed": true
+        }
+      },
+      "sourceUrl": "https://dev.meta.ai/docs/models",
+      "verifiedAt": "2026-09-25"
     }
   }
 }

package/bin/aiwg.mjs

@@ -149,6 +149,8 @@ const FAST_HELP_TEXT = `
   EVIDENCE
     evidence export --output <dir> Package portable activity, report, source, eval, and provenance evidence
     evidence verify <bundle>     Verify every member hash and the bundle checkpoint
+    effect record|lookup|reconcile Record, look up or reconcile a side effect in the signed effect ledger
+    effect verify|checkpoint|keys Verify the effect ledger, checkpoint it, or manage its signing key
 
   SCAFFOLDING
     new-bundle <name>            Create project-local bundle (--type extension|addon|framework|plugin|provider, --starter skill|rule|agent|minimal, --dry-run)

package/dist/src/api/index.d.ts

@@ -25,6 +25,7 @@ export * from '../schema/index.js';
 export * from '../dataset/index.js';
 export * from '../network-analysis/index.js';
 export * from '../decision/index.js';
+export * from '../effects/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, type ArtifactTrustRoot, type ArtifactTrustState, type RootBootstrapResult, type RootTransitionResult, type ArtifactTrustPolicySettings, type TrustedChannelState, } from '../security/artifact-trust.js';
 export * from '../writing/writer-profile.js';
 export * from '../writing/writer-profile-store.js';

package/dist/src/api/index.js

@@ -25,6 +25,7 @@ export * from '../schema/index.js';
 export * from '../dataset/index.js';
 export * from '../network-analysis/index.js';
 export * from '../decision/index.js';
+export * from '../effects/index.js';
 export { ARTIFACT_TRUST_ROOT_MEDIA_TYPE, ARTIFACT_TRUST_ROOT_SCHEMA_VERSION, ARTIFACT_TRUST_STATE_SCHEMA_VERSION, bootstrapTrustRoot, parseTrustRoot, parseTrustState, readTrustState, validateTrustRoot, validateTrustState, verifyRootTransition, writeTrustState, channelStateKey, canonicalJson, dssePae, publicKeyFingerprint, sha256, } from '../security/artifact-trust.js';
 export * from '../writing/writer-profile.js';
 export * from '../writing/writer-profile-store.js';

package/dist/src/artifacts/enrichment/cli.js

@@ -187,7 +187,7 @@ function handleUsingRlm(args) {
             inputs: [{ artifactId: f, contentHash }],
             query: ENRICHMENT_PROMPT,
             subPrompt: ENRICHMENT_PROMPT,
-            model: 'claude-sonnet-4-6',
+            model: 'claude-sonnet-5',
             aggregateStrategy: 'json-merge',
         });
         plans.push({

package/dist/src/artifacts/views/cli.js

@@ -222,7 +222,7 @@ function handleBuild(args) {
             ],
             query: def.prompt,
             subPrompt: def.prompt,
-            model: 'claude-sonnet-4-6',
+            model: 'claude-sonnet-5',
             aggregateStrategy: def.aggregate,
         });
         plans.push({

package/dist/src/audit/operator-decision.js

@@ -154,6 +154,16 @@ function validateInput(input) {
 function hashRecord(value) {
     return `sha256:${createHash('sha256').update(canonicalJson(value)).digest('hex')}`;
 }
+/**
+ * Deterministic JSON for decision hashes. This is deliberately NOT the RFC 8785
+ * canonicalizer (`security/artifact-trust.canonicalJson`): keys are ordered with
+ * `localeCompare` rather than by UTF-16 code unit, and `undefined` members are
+ * dropped. The two agree when no sibling keys differ in case or punctuation
+ * order, but not in general (for example `{"B","_c","a"}` orders as
+ * `_c,a,B` here and `B,_c,a` under RFC 8785). Existing record_hash and
+ * context_digest values in stored decision chains depend on this ordering, so
+ * it is kept; test/unit/security/canonical-json-parity.test.ts pins it.
+ */
 function canonicalJson(value) {
     if (Array.isArray(value))
         return `[${value.map(canonicalJson).join(',')}]`;

package/dist/src/auth/credential-store.js

@@ -38,51 +38,84 @@ function parseCredentials(raw) {
     }
     return value;
 }
-const SERVICE = "releases.aiwg.io";
-const ACCOUNT = "aiwg-cli";
+export const DEFAULT_CREDENTIAL_SERVICE = "releases.aiwg.io";
+export const DEFAULT_CREDENTIAL_ACCOUNT = "aiwg-cli";
+function resolveIdentity(identity = {}) {
+    const service = identity.service ?? DEFAULT_CREDENTIAL_SERVICE;
+    const account = identity.account ?? DEFAULT_CREDENTIAL_ACCOUNT;
+    for (const [label, value] of [["service", service], ["account", account]]) {
+        // Values reach native helpers as argv entries or PowerShell string literals; refuse
+        // empty values and control characters rather than depend on each helper's parsing.
+        if (typeof value !== "string" || !value || value.length > 256 || /[\u0000-\u001f\u007f]/.test(value)) {
+            throw new Error(`credential store ${label} must be a non-empty string without control characters`);
+        }
+    }
+    return { service, account };
+}
+/** Quote a value as a PowerShell single-quoted string literal. */
+function powershellLiteral(value) {
+    return `'${value.replace(/['\u2018\u2019\u201a\u201b]/g, "$&$&")}'`;
+}
 class NativeCredentialStore {
     run;
-    constructor(run = defaultCommandRunner) {
+    service;
+    account;
+    constructor(run = defaultCommandRunner, identity = {}) {
         this.run = run;
+        ({ service: this.service, account: this.account } = resolveIdentity(identity));
     }
+    async load() { const raw = await this.loadRaw(); return raw === null ? null : this.parse(raw); }
+    async save(credentials) { await this.saveRaw(JSON.stringify(credentials)); }
+    async loadSecret() { const raw = await this.loadRaw(); return raw === null ? null : raw.trim(); }
+    async saveSecret(value) { await this.saveRaw(requireSecretValue(value)); }
+    async deleteSecret() { await this.delete(); }
     parse(raw) { return parseCredentials(raw.trim()); }
 }
+function requireSecretValue(value) {
+    if (typeof value !== "string" || !value || value.length > 16384 || /[\u0000-\u001f\u007f]/.test(value)) {
+        throw new Error("secret value must be a non-empty single-line string");
+    }
+    return value;
+}
 export class MacOsKeychainStore extends NativeCredentialStore {
-    metadata = { provider: "macos-keychain", location: `Keychain:${SERVICE}/${ACCOUNT}` };
-    async load() {
-        const result = await this.run("security", ["find-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-w"]);
-        return result.exitCode === 44 ? null : result.exitCode === 0 ? this.parse(result.stdout) : Promise.reject(new Error("macOS Keychain read failed"));
+    metadata = { provider: "macos-keychain", location: `Keychain:${this.service}/${this.account}` };
+    async loadRaw() {
+        const result = await this.run("security", ["find-generic-password", "-a", this.account, "-s", this.service, "-w"]);
+        return result.exitCode === 44 ? null : result.exitCode === 0 ? result.stdout : Promise.reject(new Error("macOS Keychain read failed"));
     }
-    async save(credentials) {
-        const result = await this.run("security", ["add-generic-password", "-U", "-a", ACCOUNT, "-s", SERVICE, "-w"], JSON.stringify(credentials));
+    async saveRaw(value) {
+        const result = await this.run("security", ["add-generic-password", "-U", "-a", this.account, "-s", this.service, "-w"], value);
         if (result.exitCode !== 0)
             throw new Error("macOS Keychain write failed");
     }
-    async delete() { await this.run("security", ["delete-generic-password", "-a", ACCOUNT, "-s", SERVICE]); }
+    async delete() { await this.run("security", ["delete-generic-password", "-a", this.account, "-s", this.service]); }
 }
 export class LinuxSecretServiceStore extends NativeCredentialStore {
-    metadata = { provider: "linux-secret-service", location: `SecretService:${SERVICE}/${ACCOUNT}` };
-    async load() {
-        const result = await this.run("secret-tool", ["lookup", "service", SERVICE, "account", ACCOUNT]);
-        return result.exitCode === 1 ? null : result.exitCode === 0 ? this.parse(result.stdout) : Promise.reject(new Error("Linux Secret Service read failed"));
+    metadata = { provider: "linux-secret-service", location: `SecretService:${this.service}/${this.account}` };
+    async loadRaw() {
+        const result = await this.run("secret-tool", ["lookup", "service", this.service, "account", this.account]);
+        return result.exitCode === 1 ? null : result.exitCode === 0 ? result.stdout : Promise.reject(new Error("Linux Secret Service read failed"));
     }
-    async save(credentials) {
-        const result = await this.run("secret-tool", ["store", `--label=AIWG ${SERVICE}`, "service", SERVICE, "account", ACCOUNT], JSON.stringify(credentials));
+    async saveRaw(value) {
+        const result = await this.run("secret-tool", ["store", `--label=AIWG ${this.service}`, "service", this.service, "account", this.account], value);
         if (result.exitCode !== 0)
             throw new Error("Linux Secret Service write failed");
     }
-    async delete() { await this.run("secret-tool", ["clear", "service", SERVICE, "account", ACCOUNT]); }
+    async delete() { await this.run("secret-tool", ["clear", "service", this.service, "account", this.account]); }
 }
-const WINDOWS_READ = "$v=New-Object Windows.Security.Credentials.PasswordVault;try{$c=$v.Retrieve('releases.aiwg.io','aiwg-cli');$c.RetrievePassword();[Console]::Out.Write($c.Password)}catch{exit 1}";
-const WINDOWS_WRITE = "$s=[Console]::In.ReadToEnd();$v=New-Object Windows.Security.Credentials.PasswordVault;$v.Add((New-Object Windows.Security.Credentials.PasswordCredential('releases.aiwg.io','aiwg-cli',$s)))";
-const WINDOWS_DELETE = "$v=New-Object Windows.Security.Credentials.PasswordVault;try{$c=$v.Retrieve('releases.aiwg.io','aiwg-cli');$v.Remove($c)}catch{}";
+// Scripts are built from the store identity; the default identity yields the exact
+// scripts used before the identity became configurable.
+const windowsRead = (target) => `$v=New-Object Windows.Security.Credentials.PasswordVault;try{$c=$v.Retrieve(${target});$c.RetrievePassword();[Console]::Out.Write($c.Password)}catch{exit 1}`;
+const windowsWrite = (target) => `$s=[Console]::In.ReadToEnd();$v=New-Object Windows.Security.Credentials.PasswordVault;$v.Add((New-Object Windows.Security.Credentials.PasswordCredential(${target},$s)))`;
+const windowsDelete = (target) => `$v=New-Object Windows.Security.Credentials.PasswordVault;try{$c=$v.Retrieve(${target});$v.Remove($c)}catch{}`;
 export class WindowsCredentialManagerStore extends NativeCredentialStore {
-    metadata = { provider: "windows-credential-manager", location: `CredentialManager:${SERVICE}/${ACCOUNT}` };
+    metadata = { provider: "windows-credential-manager", location: `CredentialManager:${this.service}/${this.account}` };
+    get target() { return `${powershellLiteral(this.service)},${powershellLiteral(this.account)}`; }
     execute(script, stdin = "") { return this.run("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", script], stdin); }
-    async load() { const result = await this.execute(WINDOWS_READ); return result.exitCode === 1 ? null : result.exitCode === 0 ? this.parse(result.stdout) : Promise.reject(new Error("Windows Credential Manager read failed")); }
-    async save(credentials) { if ((await this.execute(WINDOWS_WRITE, JSON.stringify(credentials))).exitCode !== 0)
+    async loadRaw() { const result = await this.execute(windowsRead(this.target)); return result.exitCode === 1 ? null : result.exitCode === 0 ? result.stdout : Promise.reject(new Error("Windows Credential Manager read failed")); }
+    async saveRaw(value) { if ((await this.execute(windowsWrite(this.target), value)).exitCode !== 0)
         throw new Error("Windows Credential Manager write failed"); }
-    async delete() { await this.execute(WINDOWS_DELETE); }
+    async delete() { await this.execute(windowsDelete(this.target)); }
 }
 export class FileCredentialStore {
     pathname;
@@ -136,12 +169,79 @@ export function createCredentialStore(options = {}) {
     if (options.useFile)
         return new FileCredentialStore(options.pathname || defaultCredentialFile(), options.allowFile === true);
     const platform = options.platform || process.platform;
+    const identity = { service: options.service, account: options.account };
     if (platform === "darwin")
-        return new MacOsKeychainStore(options.runner);
+        return new MacOsKeychainStore(options.runner, identity);
     if (platform === "win32")
-        return new WindowsCredentialManagerStore(options.runner);
+        return new WindowsCredentialManagerStore(options.runner, identity);
     if (platform === "linux")
-        return new LinuxSecretServiceStore(options.runner);
+        return new LinuxSecretServiceStore(options.runner, identity);
     throw new Error("no native credential store is available; explicitly opt in to the mode-0600 file fallback");
 }
+/** Mode-0600 file secret, used only on explicit opt-in (tests, or hosts without a native store). */
+export class FileSecretStore {
+    pathname;
+    explicitlyAllowed;
+    metadata;
+    constructor(pathname, explicitlyAllowed) {
+        this.pathname = pathname;
+        this.explicitlyAllowed = explicitlyAllowed;
+        this.pathname = path.resolve(pathname);
+        this.metadata = { provider: "file", location: this.pathname };
+    }
+    assertAllowed() { if (!this.explicitlyAllowed)
+        throw new Error("secret file fallback requires an explicit opt-in"); }
+    async loadSecret() {
+        this.assertAllowed();
+        try {
+            const stat = await fs.lstat(this.pathname);
+            if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0)
+                throw new Error("secret file must be a non-symlink mode-0600 regular file");
+            return (await fs.readFile(this.pathname, "utf8")).trim() || null;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    }
+    async saveSecret(value) {
+        this.assertAllowed();
+        requireSecretValue(value);
+        await fs.mkdir(path.dirname(this.pathname), { recursive: true, mode: 0o700 });
+        const temporary = `${this.pathname}.${process.pid}.tmp`;
+        await fs.writeFile(temporary, `${value}\n`, { mode: 0o600, flag: "wx" });
+        await fs.rename(temporary, this.pathname);
+        await fs.chmod(this.pathname, 0o600);
+    }
+    async deleteSecret() { this.assertAllowed(); await fs.unlink(this.pathname).catch((error) => { if (error.code !== "ENOENT")
+        throw error; }); }
+}
+export class MemorySecretStore {
+    metadata = { provider: "memory", location: "injected-memory-store" };
+    #value = null;
+    async loadSecret() { return this.#value; }
+    async saveSecret(value) { this.#value = requireSecretValue(value); }
+    async deleteSecret() { this.#value = null; }
+}
+/**
+ * Raw-secret store on the host secret service. `service` and `account` name the
+ * entry; callers pick an identity distinct from the release credential.
+ */
+export function createSecretStore(options) {
+    if (options.useFile) {
+        if (!options.pathname)
+            throw new Error("secret file fallback requires an explicit pathname");
+        return new FileSecretStore(options.pathname, options.allowFile === true);
+    }
+    const platform = options.platform || process.platform;
+    const identity = { service: options.service, account: options.account };
+    if (platform === "darwin")
+        return new MacOsKeychainStore(options.runner, identity);
+    if (platform === "win32")
+        return new WindowsCredentialManagerStore(options.runner, identity);
+    if (platform === "linux")
+        return new LinuxSecretServiceStore(options.runner, identity);
+    throw new Error("no native secret store is available; explicitly opt in to the mode-0600 file fallback");
+}
 //# sourceMappingURL=credential-store.js.map